@claudexor/schema 3.0.4 → 3.1.1

package/dist/effort.d.ts

@@ -0,0 +1,132 @@
+import { z } from "zod";
+/**
+ * Reasoning-effort vocabulary: the open wire type and the ONE owner of every
+ * derived lookup (per-model narrowing, ladder merging, untyped-surface schema,
+ * help text). Split out of harness.ts because effort is its own contract with
+ * its own consumers — adapters, the CLI, the MCP tool schema and the macOS
+ * picker all resolve through here rather than copying a level list.
+ *
+ * There is deliberately NO static rank table here. Vendors already return
+ * their effort levels ORDERED weakest→strongest (codex `model/list` →
+ * `supportedReasoningEfforts` is an ordered array per model; `claude --help`
+ * prints the `--effort` values in order), and that order is part of the parsed
+ * vendor response. Ordering authority is therefore the vendor's own advertised
+ * sequence: a model's ladder is its own ordered list, a harness's ladder is
+ * the positional merge of its models' lists (`mergeEffortLadders`), and a
+ * level's rank is its position in that merged list. A second, hand-maintained
+ * copy of that knowledge can only ever disagree with the first.
+ */
+/** Longest effort slug accepted on the wire. */
+export declare const EFFORT_HINT_MAX_LENGTH = 32;
+/** Lowercase slug shape: `low`, `xhigh`, `ultra`, `super-max`, `turbo_2`. */
+export declare const EFFORT_HINT_PATTERN: RegExp;
+/**
+ * OPEN cross-harness reasoning-effort vocabulary — deliberately a bounded slug,
+ * not an enum, mirroring the vendor contract (codex's own generated schema types
+ * `ReasoningEffort` as "a non-empty reasoning effort value advertised by the
+ * model"). Adapters advertise the subset they actually accept per (harness,
+ * model); the shared normalizer passes an advertised level through verbatim,
+ * clamps an unadvertised-but-mergeable one onto the nearest advertised level
+ * inside the vendor's own order, and REFUSES a level the merged ladder has
+ * never seen — so a vendor level newer than this repo works with no code
+ * change, and a typo is never silently downgraded.
+ */
+export declare const EffortHint: z.ZodString;
+export type EffortHint = z.infer<typeof EffortHint>;
+/** What one model advertises: its ordered effort vocabulary and vendor default. */
+export declare const ModelEffortCapability: z.ZodObject<{
+    levels: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    default: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    levels: string[];
+    default: string | null;
+}, {
+    levels?: string[] | undefined;
+    default?: string | null | undefined;
+}>;
+export type ModelEffortCapability = z.infer<typeof ModelEffortCapability>;
+/**
+ * How every surface describes the effort vocabulary in help and refusal text.
+ * ONE owner (INV-122) so no CLI string hand-copies a level list — and it
+ * deliberately names NO levels of its own: the real answer is per (harness,
+ * model), lives in the manifest, and is ordered by the vendor. Surfaces that
+ * know the resolved harness/model name the actual advertised set instead.
+ */
+export declare const EFFORT_HINT_HELP: string;
+/**
+ * JSON-Schema fragment for an effort value on UNTYPED surfaces (the MCP tool
+ * schema). ONE owner (INV-121/122): the bounds come from the same constants the
+ * zod SSOT enforces, so no surface hand-copies a level list — and, critically,
+ * the surface stays as OPEN as the vendor contract. Pinning an enum here would
+ * reject a level a model genuinely advertises, which is the bug this design
+ * exists to prevent.
+ *
+ * The guidance is `EFFORT_HINT_HELP`, the SAME string the CLI renders, so an MCP
+ * client and a `--effort` refusal describe the vocabulary identically.
+ */
+export declare function effortJsonSchema(description: string): Record<string, unknown>;
+/**
+ * The effort vocabulary advertised for one (harness, model) pair. ONE owner for
+ * the per-model narrowing (INV-122): the model's own advertised list when the
+ * probe recorded one, else the harness-wide merged ladder. Every surface that
+ * needs to know "what efforts may this run use" resolves through here.
+ */
+export declare function effortLevelsForModel(capabilities: {
+    effort_levels: readonly EffortHint[];
+    model_effort_levels: Record<string, ModelEffortCapability>;
+}, model: string | null | undefined): readonly EffortHint[];
+/** Result of merging several vendor-ordered effort ladders into one. */
+export interface MergedEffortLadder {
+    /**
+     * The merged RANK order, weakest→strongest, honoring every input list's own
+     * order when they are mutually consistent. It carries ONLY levels some input
+     * list actually ordered against a neighbor; a level no list constrains lives
+     * in `unconstrained` instead. When the inputs are NOT consistent
+     * (`consistent` false), this is a first-seen deduplication — usable as a
+     * display set, never as a rank authority.
+     */
+    order: EffortHint[];
+    /**
+     * Levels that appear in some input list but share NO ordering constraint
+     * with any other level (each came only from single-level lists). Their
+     * position is UNKNOWN, not maximal: the old behavior let a plain topological
+     * tail place `medium` ABOVE `high` in a merge of ["low","high"] and
+     * ["medium"], silently making the unconstrained level the strongest rank.
+     * They stay advertised (membership, pickers), but clamping to or from them
+     * refuses with disclosure — exactly like the inconsistent case — because any
+     * rank for them would be invented.
+     */
+    unconstrained: EffortHint[];
+    /**
+     * False when two input lists genuinely contradict each other's relative
+     * order (`a` before `b` in one, `b` before `a` in another). Cross-model
+     * clamping is then IMPOSSIBLE for the affected harness — there is no honest
+     * rank to clamp along — and consumers must refuse with disclosure rather
+     * than invent an order (see `resolveEffort`'s ladder argument).
+     */
+    consistent: boolean;
+}
+/**
+ * Positional merge of vendor-ordered effort ladders — the ONE owner of
+ * cross-model effort ordering (INV-122). Each input list is treated as a chain
+ * of ordering constraints exactly as the vendor advertised it; the merge is a
+ * stable topological sort (ties break on first appearance across the inputs),
+ * so a set of lists that are prefixes/subsets of one another merge into the
+ * longest ladder, and a brand-new vendor level lands at its vendor-advertised
+ * position with no code change here.
+ *
+ * A level that carries NO ordering constraint at all (it only ever appears in
+ * single-level lists) has an UNKNOWN position, not a maximal one: a plain
+ * topological tail would park it after everything else and accidentally crown
+ * it the strongest rank (merging ["low","high"] with ["medium"] used to yield
+ * medium ABOVE high). Such levels are returned separately as `unconstrained`
+ * — advertised but unrankable — so no consumer can clamp along a position the
+ * vendor never stated. (Disconnected multi-level chains remain approximated
+ * by first-seen tie-breaking, as before.)
+ *
+ * The Swift side orders its pickers by merging the manifest's already-ordered
+ * `effort_levels`/`model_effort_levels` arrays the same way (`EffortLadder`,
+ * display ordering only — Swift never clamps, so it keeps the flat merge).
+ */
+export declare function mergeEffortLadders(lists: ReadonlyArray<readonly EffortHint[]>): MergedEffortLadder;
+//# sourceMappingURL=effort.d.ts.map

package/dist/effort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"effort.d.ts","sourceRoot":"","sources":["../src/effort.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;GAgBG;AAEH,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,KAAK,CAAC;AACzC,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,QAAkC,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU,aAUpB,CAAC;AACJ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,mFAAmF;AACnF,eAAO,MAAM,qBAAqB;;;;;;;;;EAamC,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QAEiD,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ7E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,YAAY,EAAE;IACZ,aAAa,EAAE,SAAS,UAAU,EAAE,CAAC;IACrC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CAC5D,EACD,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,SAAS,UAAU,EAAE,CAIvB;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC;;;;;;;OAOG;IACH,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB;;;;;;;;;OASG;IACH,aAAa,EAAE,UAAU,EAAE,CAAC;IAC5B;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,aAAa,CAAC,SAAS,UAAU,EAAE,CAAC,GAC1C,kBAAkB,CAkDpB"}

package/dist/effort.js

@@ -0,0 +1,167 @@
+import { z } from "zod";
+/**
+ * Reasoning-effort vocabulary: the open wire type and the ONE owner of every
+ * derived lookup (per-model narrowing, ladder merging, untyped-surface schema,
+ * help text). Split out of harness.ts because effort is its own contract with
+ * its own consumers — adapters, the CLI, the MCP tool schema and the macOS
+ * picker all resolve through here rather than copying a level list.
+ *
+ * There is deliberately NO static rank table here. Vendors already return
+ * their effort levels ORDERED weakest→strongest (codex `model/list` →
+ * `supportedReasoningEfforts` is an ordered array per model; `claude --help`
+ * prints the `--effort` values in order), and that order is part of the parsed
+ * vendor response. Ordering authority is therefore the vendor's own advertised
+ * sequence: a model's ladder is its own ordered list, a harness's ladder is
+ * the positional merge of its models' lists (`mergeEffortLadders`), and a
+ * level's rank is its position in that merged list. A second, hand-maintained
+ * copy of that knowledge can only ever disagree with the first.
+ */
+/** Longest effort slug accepted on the wire. */
+export const EFFORT_HINT_MAX_LENGTH = 32;
+/** Lowercase slug shape: `low`, `xhigh`, `ultra`, `super-max`, `turbo_2`. */
+export const EFFORT_HINT_PATTERN = /^[a-z0-9]+(?:[_-][a-z0-9]+)*$/;
+/**
+ * OPEN cross-harness reasoning-effort vocabulary — deliberately a bounded slug,
+ * not an enum, mirroring the vendor contract (codex's own generated schema types
+ * `ReasoningEffort` as "a non-empty reasoning effort value advertised by the
+ * model"). Adapters advertise the subset they actually accept per (harness,
+ * model); the shared normalizer passes an advertised level through verbatim,
+ * clamps an unadvertised-but-mergeable one onto the nearest advertised level
+ * inside the vendor's own order, and REFUSES a level the merged ladder has
+ * never seen — so a vendor level newer than this repo works with no code
+ * change, and a typo is never silently downgraded.
+ */
+export const EffortHint = z
+    .string()
+    .min(1)
+    .max(EFFORT_HINT_MAX_LENGTH)
+    .regex(EFFORT_HINT_PATTERN, "effort must be a lowercase slug (letters, digits, single - or _ separators)")
+    .describe("Cross-harness reasoning-effort level as a lowercase slug (open vocabulary, mirroring the vendor contract); adapters advertise the levels they accept per model, ordered weakest to strongest by the vendor itself, and a shared normalizer passes advertised levels through, clamps inside the vendor order, and refuses levels the advertised ladder has never seen.");
+/** What one model advertises: its ordered effort vocabulary and vendor default. */
+export const ModelEffortCapability = z
+    .object({
+    levels: z
+        .array(EffortHint)
+        .default([])
+        .describe("Ordered (weakest to strongest) reasoning-effort levels this model advertises, in the vendor's own order."),
+    default: EffortHint.nullable()
+        .default(null)
+        .describe("The effort level the vendor uses for this model when none is requested."),
+})
+    .strict()
+    .describe("Reasoning-effort vocabulary a single model advertises.");
+/**
+ * How every surface describes the effort vocabulary in help and refusal text.
+ * ONE owner (INV-122) so no CLI string hand-copies a level list — and it
+ * deliberately names NO levels of its own: the real answer is per (harness,
+ * model), lives in the manifest, and is ordered by the vendor. Surfaces that
+ * know the resolved harness/model name the actual advertised set instead.
+ */
+export const EFFORT_HINT_HELP = "reasoning-effort level the resolved harness/model advertises " +
+    "(a lowercase slug; each vendor lists its own levels, weakest to strongest)";
+/**
+ * JSON-Schema fragment for an effort value on UNTYPED surfaces (the MCP tool
+ * schema). ONE owner (INV-121/122): the bounds come from the same constants the
+ * zod SSOT enforces, so no surface hand-copies a level list — and, critically,
+ * the surface stays as OPEN as the vendor contract. Pinning an enum here would
+ * reject a level a model genuinely advertises, which is the bug this design
+ * exists to prevent.
+ *
+ * The guidance is `EFFORT_HINT_HELP`, the SAME string the CLI renders, so an MCP
+ * client and a `--effort` refusal describe the vocabulary identically.
+ */
+export function effortJsonSchema(description) {
+    return {
+        type: "string",
+        minLength: 1,
+        maxLength: EFFORT_HINT_MAX_LENGTH,
+        pattern: EFFORT_HINT_PATTERN.source,
+        description: `${description} Expects a ${EFFORT_HINT_HELP}; an advertised level is passed through as-is.`,
+    };
+}
+/**
+ * The effort vocabulary advertised for one (harness, model) pair. ONE owner for
+ * the per-model narrowing (INV-122): the model's own advertised list when the
+ * probe recorded one, else the harness-wide merged ladder. Every surface that
+ * needs to know "what efforts may this run use" resolves through here.
+ */
+export function effortLevelsForModel(capabilities, model) {
+    const id = typeof model === "string" ? model.trim() : "";
+    const advertised = id ? capabilities.model_effort_levels[id]?.levels : undefined;
+    return advertised && advertised.length > 0 ? advertised : capabilities.effort_levels;
+}
+/**
+ * Positional merge of vendor-ordered effort ladders — the ONE owner of
+ * cross-model effort ordering (INV-122). Each input list is treated as a chain
+ * of ordering constraints exactly as the vendor advertised it; the merge is a
+ * stable topological sort (ties break on first appearance across the inputs),
+ * so a set of lists that are prefixes/subsets of one another merge into the
+ * longest ladder, and a brand-new vendor level lands at its vendor-advertised
+ * position with no code change here.
+ *
+ * A level that carries NO ordering constraint at all (it only ever appears in
+ * single-level lists) has an UNKNOWN position, not a maximal one: a plain
+ * topological tail would park it after everything else and accidentally crown
+ * it the strongest rank (merging ["low","high"] with ["medium"] used to yield
+ * medium ABOVE high). Such levels are returned separately as `unconstrained`
+ * — advertised but unrankable — so no consumer can clamp along a position the
+ * vendor never stated. (Disconnected multi-level chains remain approximated
+ * by first-seen tie-breaking, as before.)
+ *
+ * The Swift side orders its pickers by merging the manifest's already-ordered
+ * `effort_levels`/`model_effort_levels` arrays the same way (`EffortLadder`,
+ * display ordering only — Swift never clamps, so it keeps the flat merge).
+ */
+export function mergeEffortLadders(lists) {
+    const firstSeen = [];
+    const successors = new Map();
+    const indegree = new Map();
+    const constrained = new Set();
+    for (const list of lists) {
+        for (const level of list) {
+            if (!indegree.has(level)) {
+                indegree.set(level, 0);
+                successors.set(level, new Set());
+                firstSeen.push(level);
+            }
+        }
+        for (let i = 1; i < list.length; i += 1) {
+            const before = list[i - 1];
+            const after = list[i];
+            if (before === after)
+                continue;
+            constrained.add(before);
+            constrained.add(after);
+            const outs = successors.get(before);
+            if (!outs.has(after)) {
+                outs.add(after);
+                indegree.set(after, (indegree.get(after) ?? 0) + 1);
+            }
+        }
+    }
+    // Every edge connects two constrained levels, so excluding the unconstrained
+    // ones from the sort cannot change any indegree.
+    const ranked = firstSeen.filter((level) => constrained.has(level));
+    const unconstrained = firstSeen.filter((level) => !constrained.has(level));
+    const order = [];
+    const emitted = new Set();
+    while (emitted.size < ranked.length) {
+        const next = ranked.find((level) => !emitted.has(level) && indegree.get(level) === 0);
+        if (next === undefined) {
+            // A cycle: the vendors' own orders contradict each other. Do not invent
+            // an order — fall back to first-seen for display and say so.
+            return {
+                order: [...order, ...ranked.filter((level) => !emitted.has(level))],
+                unconstrained,
+                consistent: false,
+            };
+        }
+        emitted.add(next);
+        order.push(next);
+        for (const succ of successors.get(next) ?? []) {
+            indegree.set(succ, (indegree.get(succ) ?? 1) - 1);
+        }
+    }
+    return { order, unconstrained, consistent: true };
+}
+//# sourceMappingURL=effort.js.map

package/dist/effort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effort.js","sourceRoot":"","sources":["../src/effort.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;;;;GAgBG;AAEH,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAEnE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,sBAAsB,CAAC;KAC3B,KAAK,CACJ,mBAAmB,EACnB,6EAA6E,CAC9E;KACA,QAAQ,CACP,uWAAuW,CACxW,CAAC;AAGJ,mFAAmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC;SACN,KAAK,CAAC,UAAU,CAAC;SACjB,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CACP,0GAA0G,CAC3G;IACH,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE;SAC3B,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,yEAAyE,CAAC;CACvF,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,wDAAwD,CAAC,CAAC;AAGtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC3B,+DAA+D;IAC/D,4EAA4E,CAAC;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,sBAAsB;QACjC,OAAO,EAAE,mBAAmB,CAAC,MAAM;QACnC,WAAW,EAAE,GAAG,WAAW,cAAc,gBAAgB,gDAAgD;KAC1G,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,YAGC,EACD,KAAgC;IAEhC,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,OAAO,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC;AACvF,CAAC;AAkCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA2C;IAE3C,MAAM,SAAS,GAAiB,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAc,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACvB,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBACjC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAe,CAAC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAe,CAAC;YACpC,IAAI,MAAM,KAAK,KAAK;gBAAE,SAAS;YAC/B,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAoB,CAAC;YACvD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,iDAAiD;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACtC,OAAO,OAAO,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACtF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,wEAAwE;YACxE,6DAA6D;YAC7D,OAAO;gBACL,KAAK,EAAE,CAAC,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACnE,aAAa;gBACb,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC"}

package/dist/events.d.ts

@@ -36,7 +36,7 @@ export declare const ThreadHeadPing: z.ZodObject<{
     revision: number;
 }>;
 export type ThreadHeadPing = z.infer<typeof ThreadHeadPing>;
-export declare const RunEventType: z.ZodEnum<["run.created", "task.contract.created", "context.pack.created", "project.git.initialized", "budget.lease.created", "budget.observation", "budget.cash", "policy.web.upgraded", "harness.started", "harness.event", "harness.completed", "route.fallback.started", "route.fallback.completed", "route.fallback.exhausted", "route.transient.detected", "route.transient.retry_scheduled", "route.profile.headroom_exceeded", "route.profile.rotated", "route.profile.rotation_exhausted", "route.transient.exhausted", "route.fallback.auth_switched", "route.primary.diverged", "session.continuity", "interaction.requested", "interaction.answered", "interaction.timeout", "interaction.answer_discarded", "plan.progress", "plan.questions", "plan.brief.materialized", "council.started", "council.draft", "council.member.failed", "council.merged", "budget.quota_pressure", "output.ready", "gate.started", "gate.completed", "review.started", "reviewer.started", "reviewer.first_event", "reviewer.auth_switched", "reviewer.completed", "reviewer.timed_out", "reviewer.failed", "finding.revalidated", "synthesis.started", "arbitration.completed", "work_product.emitted", "work_product.adopted", "control.requested", "control.applied", "control.rejected", "run.blocked", "run.completed", "run.failed"]>;
+export declare const RunEventType: z.ZodEnum<["run.created", "task.contract.created", "context.pack.created", "project.git.initialized", "project.claude_bridge.created", "budget.lease.created", "budget.observation", "budget.cash", "policy.web.upgraded", "harness.started", "harness.event", "harness.completed", "route.fallback.started", "route.fallback.completed", "route.fallback.exhausted", "route.transient.detected", "route.transient.retry_scheduled", "route.profile.headroom_exceeded", "route.profile.rotated", "route.profile.rotation_exhausted", "route.transient.exhausted", "route.fallback.auth_switched", "route.primary.diverged", "route.pool.degraded", "session.continuity", "interaction.requested", "interaction.answered", "interaction.timeout", "interaction.answer_discarded", "plan.progress", "plan.questions", "plan.brief.materialized", "council.started", "council.draft", "council.member.failed", "council.merged", "budget.quota_pressure", "delegation.belt.unavailable", "output.ready", "gate.started", "gate.completed", "review.preflight", "review.started", "review.skipped", "reviewer.started", "reviewer.first_event", "reviewer.auth_switched", "reviewer.completed", "reviewer.timed_out", "reviewer.failed", "finding.revalidated", "synthesis.started", "arbitration.completed", "work_product.emitted", "work_product.adopted", "control.requested", "control.applied", "control.rejected", "run.blocked", "run.completed", "run.failed", "run.continuation", "run.continuation.denied"]>;
 export type RunEventType = z.infer<typeof RunEventType>;
 /**
  * Typed payload for `route.fallback.*` events. The orchestrator validates this
@@ -96,6 +96,61 @@ export declare const RoutePrimaryDivergedPayload: z.ZodObject<{
     reason?: "quota_exhausted" | "money_exhausted" | "subscription_exhausted" | "rate_limited" | "harness_error" | "stall" | "web_evidence_unsatisfied" | "fallback_model" | "not_portable" | "auth_unavailable" | "readiness_preferred" | "manual" | undefined;
 }>;
 export type RoutePrimaryDivergedPayload = z.infer<typeof RoutePrimaryDivergedPayload>;
+/** The routing stage at which an auto-pool lane was dropped. Typed so a
+ * disclosed omission preserves the ACTUAL cause (an access refusal is not an
+ * auth failure) instead of collapsing every drop to one reason (QA-043). */
+export declare const RouteDropStage: z.ZodEnum<["discovery", "settings", "credential", "doctor", "capability", "access", "web", "attachment"]>;
+export type RouteDropStage = z.infer<typeof RouteDropStage>;
+/**
+ * Typed payload for `route.pool.degraded`. Emitted once at route resolution
+ * when an AUTO pool lost lanes and/or clamped width below the requested `n`.
+ * It is the canonical requested-vs-effective route receipt: the resolver never
+ * duplicates a surviving harness to refill a dropped lane's slot (the QA-043
+ * self-race), so the shrink is disclosed here rather than hidden as an
+ * identical extra candidate. Explicit pools throw at the drop and never reach
+ * this event, so a degraded auto pool is always attributable to real
+ * unavailability, not a silent substitution.
+ */
+export declare const RoutePoolDegradedPayload: z.ZodObject<{
+    requested_harnesses: z.ZodArray<z.ZodString, "many">;
+    effective_harnesses: z.ZodArray<z.ZodString, "many">;
+    requested_n: z.ZodNumber;
+    effective_n: z.ZodNumber;
+    dropped_lanes: z.ZodArray<z.ZodObject<{
+        harness_id: z.ZodString;
+        stage: z.ZodEnum<["discovery", "settings", "credential", "doctor", "capability", "access", "web", "attachment"]>;
+        detail: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        detail: string;
+        harness_id: string;
+        stage: "web" | "access" | "credential" | "capability" | "settings" | "discovery" | "doctor" | "attachment";
+    }, {
+        detail: string;
+        harness_id: string;
+        stage: "web" | "access" | "credential" | "capability" | "settings" | "discovery" | "doctor" | "attachment";
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    requested_harnesses: string[];
+    effective_harnesses: string[];
+    requested_n: number;
+    effective_n: number;
+    dropped_lanes: {
+        detail: string;
+        harness_id: string;
+        stage: "web" | "access" | "credential" | "capability" | "settings" | "discovery" | "doctor" | "attachment";
+    }[];
+}, {
+    requested_harnesses: string[];
+    effective_harnesses: string[];
+    requested_n: number;
+    effective_n: number;
+    dropped_lanes: {
+        detail: string;
+        harness_id: string;
+        stage: "web" | "access" | "credential" | "capability" | "settings" | "discovery" | "doctor" | "attachment";
+    }[];
+}>;
+export type RoutePoolDegradedPayload = z.infer<typeof RoutePoolDegradedPayload>;
 /** Append-only event record (one JSONL line). */
 export declare const RunEvent: z.ZodObject<{
     /**
@@ -110,10 +165,10 @@ export declare const RunEvent: z.ZodObject<{
     /** Thread this run is a turn of, when any. Lets the global event multiplex
      * route live progress to a chat surface without a reverse job lookup. */
     thread_id: z.ZodOptional<z.ZodString>;
-    type: z.ZodEnum<["run.created", "task.contract.created", "context.pack.created", "project.git.initialized", "budget.lease.created", "budget.observation", "budget.cash", "policy.web.upgraded", "harness.started", "harness.event", "harness.completed", "route.fallback.started", "route.fallback.completed", "route.fallback.exhausted", "route.transient.detected", "route.transient.retry_scheduled", "route.profile.headroom_exceeded", "route.profile.rotated", "route.profile.rotation_exhausted", "route.transient.exhausted", "route.fallback.auth_switched", "route.primary.diverged", "session.continuity", "interaction.requested", "interaction.answered", "interaction.timeout", "interaction.answer_discarded", "plan.progress", "plan.questions", "plan.brief.materialized", "council.started", "council.draft", "council.member.failed", "council.merged", "budget.quota_pressure", "output.ready", "gate.started", "gate.completed", "review.started", "reviewer.started", "reviewer.first_event", "reviewer.auth_switched", "reviewer.completed", "reviewer.timed_out", "reviewer.failed", "finding.revalidated", "synthesis.started", "arbitration.completed", "work_product.emitted", "work_product.adopted", "control.requested", "control.applied", "control.rejected", "run.blocked", "run.completed", "run.failed"]>;
+    type: z.ZodEnum<["run.created", "task.contract.created", "context.pack.created", "project.git.initialized", "project.claude_bridge.created", "budget.lease.created", "budget.observation", "budget.cash", "policy.web.upgraded", "harness.started", "harness.event", "harness.completed", "route.fallback.started", "route.fallback.completed", "route.fallback.exhausted", "route.transient.detected", "route.transient.retry_scheduled", "route.profile.headroom_exceeded", "route.profile.rotated", "route.profile.rotation_exhausted", "route.transient.exhausted", "route.fallback.auth_switched", "route.primary.diverged", "route.pool.degraded", "session.continuity", "interaction.requested", "interaction.answered", "interaction.timeout", "interaction.answer_discarded", "plan.progress", "plan.questions", "plan.brief.materialized", "council.started", "council.draft", "council.member.failed", "council.merged", "budget.quota_pressure", "delegation.belt.unavailable", "output.ready", "gate.started", "gate.completed", "review.preflight", "review.started", "review.skipped", "reviewer.started", "reviewer.first_event", "reviewer.auth_switched", "reviewer.completed", "reviewer.timed_out", "reviewer.failed", "finding.revalidated", "synthesis.started", "arbitration.completed", "work_product.emitted", "work_product.adopted", "control.requested", "control.applied", "control.rejected", "run.blocked", "run.completed", "run.failed", "run.continuation", "run.continuation.denied"]>;
     payload: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, "strip", z.ZodTypeAny, {
-    type: "run.created" | "task.contract.created" | "context.pack.created" | "project.git.initialized" | "budget.lease.created" | "budget.observation" | "budget.cash" | "policy.web.upgraded" | "harness.started" | "harness.event" | "harness.completed" | "route.fallback.started" | "route.fallback.completed" | "route.fallback.exhausted" | "route.transient.detected" | "route.transient.retry_scheduled" | "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted" | "route.transient.exhausted" | "route.fallback.auth_switched" | "route.primary.diverged" | "session.continuity" | "interaction.requested" | "interaction.answered" | "interaction.timeout" | "interaction.answer_discarded" | "plan.progress" | "plan.questions" | "plan.brief.materialized" | "council.started" | "council.draft" | "council.member.failed" | "council.merged" | "budget.quota_pressure" | "output.ready" | "gate.started" | "gate.completed" | "review.started" | "reviewer.started" | "reviewer.first_event" | "reviewer.auth_switched" | "reviewer.completed" | "reviewer.timed_out" | "reviewer.failed" | "finding.revalidated" | "synthesis.started" | "arbitration.completed" | "work_product.emitted" | "work_product.adopted" | "control.requested" | "control.applied" | "control.rejected" | "run.blocked" | "run.completed" | "run.failed";
+    type: "run.created" | "task.contract.created" | "context.pack.created" | "project.git.initialized" | "project.claude_bridge.created" | "budget.lease.created" | "budget.observation" | "budget.cash" | "policy.web.upgraded" | "harness.started" | "harness.event" | "harness.completed" | "route.fallback.started" | "route.fallback.completed" | "route.fallback.exhausted" | "route.transient.detected" | "route.transient.retry_scheduled" | "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted" | "route.transient.exhausted" | "route.fallback.auth_switched" | "route.primary.diverged" | "route.pool.degraded" | "session.continuity" | "interaction.requested" | "interaction.answered" | "interaction.timeout" | "interaction.answer_discarded" | "plan.progress" | "plan.questions" | "plan.brief.materialized" | "council.started" | "council.draft" | "council.member.failed" | "council.merged" | "budget.quota_pressure" | "delegation.belt.unavailable" | "output.ready" | "gate.started" | "gate.completed" | "review.preflight" | "review.started" | "review.skipped" | "reviewer.started" | "reviewer.first_event" | "reviewer.auth_switched" | "reviewer.completed" | "reviewer.timed_out" | "reviewer.failed" | "finding.revalidated" | "synthesis.started" | "arbitration.completed" | "work_product.emitted" | "work_product.adopted" | "control.requested" | "control.applied" | "control.rejected" | "run.blocked" | "run.completed" | "run.failed" | "run.continuation" | "run.continuation.denied";
     ts: string;
     payload: Record<string, unknown>;
     run_id: string;
@@ -121,7 +176,7 @@ export declare const RunEvent: z.ZodObject<{
     thread_id?: string | undefined;
     seq?: number | undefined;
 }, {
-    type: "run.created" | "task.contract.created" | "context.pack.created" | "project.git.initialized" | "budget.lease.created" | "budget.observation" | "budget.cash" | "policy.web.upgraded" | "harness.started" | "harness.event" | "harness.completed" | "route.fallback.started" | "route.fallback.completed" | "route.fallback.exhausted" | "route.transient.detected" | "route.transient.retry_scheduled" | "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted" | "route.transient.exhausted" | "route.fallback.auth_switched" | "route.primary.diverged" | "session.continuity" | "interaction.requested" | "interaction.answered" | "interaction.timeout" | "interaction.answer_discarded" | "plan.progress" | "plan.questions" | "plan.brief.materialized" | "council.started" | "council.draft" | "council.member.failed" | "council.merged" | "budget.quota_pressure" | "output.ready" | "gate.started" | "gate.completed" | "review.started" | "reviewer.started" | "reviewer.first_event" | "reviewer.auth_switched" | "reviewer.completed" | "reviewer.timed_out" | "reviewer.failed" | "finding.revalidated" | "synthesis.started" | "arbitration.completed" | "work_product.emitted" | "work_product.adopted" | "control.requested" | "control.applied" | "control.rejected" | "run.blocked" | "run.completed" | "run.failed";
+    type: "run.created" | "task.contract.created" | "context.pack.created" | "project.git.initialized" | "project.claude_bridge.created" | "budget.lease.created" | "budget.observation" | "budget.cash" | "policy.web.upgraded" | "harness.started" | "harness.event" | "harness.completed" | "route.fallback.started" | "route.fallback.completed" | "route.fallback.exhausted" | "route.transient.detected" | "route.transient.retry_scheduled" | "route.profile.headroom_exceeded" | "route.profile.rotated" | "route.profile.rotation_exhausted" | "route.transient.exhausted" | "route.fallback.auth_switched" | "route.primary.diverged" | "route.pool.degraded" | "session.continuity" | "interaction.requested" | "interaction.answered" | "interaction.timeout" | "interaction.answer_discarded" | "plan.progress" | "plan.questions" | "plan.brief.materialized" | "council.started" | "council.draft" | "council.member.failed" | "council.merged" | "budget.quota_pressure" | "delegation.belt.unavailable" | "output.ready" | "gate.started" | "gate.completed" | "review.preflight" | "review.started" | "review.skipped" | "reviewer.started" | "reviewer.first_event" | "reviewer.auth_switched" | "reviewer.completed" | "reviewer.timed_out" | "reviewer.failed" | "finding.revalidated" | "synthesis.started" | "arbitration.completed" | "work_product.emitted" | "work_product.adopted" | "control.requested" | "control.applied" | "control.rejected" | "run.blocked" | "run.completed" | "run.failed" | "run.continuation" | "run.continuation.denied";
     ts: string;
     run_id: string;
     task_id: string;

package/dist/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;EAU4C,CAAC;AAC7E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;;;;;;;;EAoBxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,YAAY,ywCA4EtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAoB9B,CAAC;AACJ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAiBrC,CAAC;AACJ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF,iDAAiD;AACjD,eAAO,MAAM,QAAQ;IAEjB;;;;OAIG;;;;;IAYH;6EACyE;;;;;;;;;;;;;;;;;;;;EAKO,CAAC;AACrF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;EAU4C,CAAC;AAC7E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEtE,eAAO,MAAM,cAAc;;;;;;;;;;;;EAoBxB,CAAC;AACJ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D,eAAO,MAAM,YAAY,q7CAwHtB,CAAC;AACJ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAExD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAoB9B,CAAC;AACJ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;;;;;;GAQG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAiBrC,CAAC;AACJ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEtF;;4EAE4E;AAC5E,eAAO,MAAM,cAAc,2GAW6C,CAAC;AACzE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAE5D;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyBlC,CAAC;AACJ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAEhF,iDAAiD;AACjD,eAAO,MAAM,QAAQ;IAEjB;;;;OAIG;;;;;IAYH;6EACyE;;;;;;;;;;;;;;;;;;;;EAKO,CAAC;AACrF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC"}

package/dist/events.js

@@ -37,6 +37,13 @@ export const RunEventType = z
     "task.contract.created",
     "context.pack.created",
     "project.git.initialized",
+    /** D-14 (INV-113): a thin `CLAUDE.md` bridge (`@AGENTS.md` import + ownership
+     * marker) was created at the PROJECT root because it had `AGENTS.md` and no
+     * `CLAUDE.md`, so a Claude Code route reads the same instructions codex/cursor
+     * read natively. The ONE live-tree write this feature adds; exclusive-create +
+     * no-follow, never overwriting a hand-written file, emitted only on an actual
+     * create. Payload: {project_root, path, source}. */
+    "project.claude_bridge.created",
     "budget.lease.created",
     "budget.observation",
     "budget.cash",
@@ -63,6 +70,14 @@ export const RunEventType = z
      * (no attempt was ever made on the primary to fall back FROM); never silent.
      * Payload: RoutePrimaryDivergedPayload {requested, effective, reason, detail}. */
     "route.primary.diverged",
+    /** QA-043: an AUTO pool dropped one or more incompatible lanes and/or its
+     * effective width fell below the requested `n`. The route resolver NEVER
+     * backfills a dropped lane's slot by duplicating a surviving harness (the
+     * self-race class), so a shrunk pool is disclosed here — requested vs
+     * effective harnesses/width plus every dropped lane and its typed stage.
+     * Explicit pools fail loudly at the drop instead of reaching this event.
+     * Payload: RoutePoolDegradedPayload. */
+    "route.pool.degraded",
     /** A thread turn was continued across the conversation (INV-137); payload
      * carries the ContinuityDisclosure stats (kind, packet_turns, summarized,
      * lane_switched_from). Replaces the old static session.rebound phrase. */
@@ -81,10 +96,30 @@ export const RunEventType = z
     "council.member.failed",
     "council.merged",
     "budget.quota_pressure",
+    /** QA-024: a --delegate attempt injected the Claudexor delegation belt but
+     * the harness reported its MCP server `failed` to start and no belt tool ran
+     * — the requested capability never became operational (the harness may have
+     * degraded to its own native subagent). Never silent: this surfaces the
+     * failed belt so the terminal outcome and UI can disclose it. Payload:
+     * {attempt_id, harness_id, server_name, reason}. */
+    "delegation.belt.unavailable",
     "output.ready",
     "gate.started",
     "gate.completed",
+    /** Reviewer-panel preflight disclosure (INV-105): a requested reviewer
+     * knob the resolved panel could not honor was DROPPED instead of refused
+     * (the auto panel's per-family `reviewerEfforts` map, which also rides
+     * stored replay surfaces). Payload: {ignored_settings: string[]} — the
+     * same disclosure channel harness.started uses (QA-070). */
+    "review.preflight",
     "review.started",
+    /** QA-025: the paid reviewer panel was intentionally NOT run — every working
+     * candidate had an empty diff, or no reviewers were configured. Emitted
+     * INSTEAD of review.started so the audit trail never claims a review began
+     * that was skipped. Payload:
+     * {reason: "no_changes"|"no_reviewers", reviewable_candidates,
+     *  configured_reviewers, configured_provider_families}. */
+    "review.skipped",
     "reviewer.started",
     "reviewer.first_event",
     "reviewer.auth_switched",
@@ -104,6 +139,15 @@ export const RunEventType = z
     "run.blocked",
     "run.completed",
     "run.failed",
+    /** D-16d: a one-shot automatic continuation was launched after a terminal
+     * context exhaustion (eligible cause, no completed WorkReport). Payload:
+     * {from_attempt, cause, continuation_count, packet_turns}. */
+    "run.continuation",
+    /** D-16d: an eligible one-shot continuation was REFUSED because its budget
+     * lease was denied — emitted INSTEAD of run.continuation so a denied lease
+     * never leaves a disclosure claiming a continuation launched. No attempt ran
+     * and the one-shot is not consumed. Payload: {from_attempt, cause, reason}. */
+    "run.continuation.denied",
 ])
     .describe("Type of an append-only run event, covering run lifecycle, contract/context creation, budget, routing fallbacks, harness activity, interactions, gates, review, arbitration, work products, and control verbs.");
 /**
@@ -156,6 +200,53 @@ export const RoutePrimaryDivergedPayload = z
         .describe("Redacted human reason the primary was dropped (e.g. cooldown, unavailable)."),
 })
     .describe("Typed payload for route.primary.diverged, validated before being stamped onto the RunEvent payload so a pre-attempt primary divergence is always evidence-backed.");
+/** The routing stage at which an auto-pool lane was dropped. Typed so a
+ * disclosed omission preserves the ACTUAL cause (an access refusal is not an
+ * auth failure) instead of collapsing every drop to one reason (QA-043). */
+export const RouteDropStage = z
+    .enum([
+    "discovery",
+    "settings",
+    "credential",
+    "doctor",
+    "capability",
+    "access",
+    "web",
+    "attachment",
+])
+    .describe("The routing stage at which an auto-pool lane was dropped.");
+/**
+ * Typed payload for `route.pool.degraded`. Emitted once at route resolution
+ * when an AUTO pool lost lanes and/or clamped width below the requested `n`.
+ * It is the canonical requested-vs-effective route receipt: the resolver never
+ * duplicates a surviving harness to refill a dropped lane's slot (the QA-043
+ * self-race), so the shrink is disclosed here rather than hidden as an
+ * identical extra candidate. Explicit pools throw at the drop and never reach
+ * this event, so a degraded auto pool is always attributable to real
+ * unavailability, not a silent substitution.
+ */
+export const RoutePoolDegradedPayload = z
+    .object({
+    requested_harnesses: z
+        .array(z.string())
+        .describe("The pool the resolver considered (explicit ids or auto-derived)."),
+    effective_harnesses: z
+        .array(z.string())
+        .describe("Distinct harnesses that actually route, in attempt order."),
+    requested_n: z.number().int().describe("The requested candidate width for this run."),
+    effective_n: z
+        .number()
+        .int()
+        .describe("Distinct candidates that will run; never inflated by duplication."),
+    dropped_lanes: z
+        .array(z.object({
+        harness_id: z.string().describe("The dropped lane's harness id."),
+        stage: RouteDropStage,
+        detail: z.string().describe("Redacted human reason the lane was dropped."),
+    }))
+        .describe("Every lane excluded from the auto pool, with its typed stage and reason."),
+})
+    .describe("Typed payload for route.pool.degraded: the requested-vs-effective route receipt for an auto pool that dropped lanes or clamped width, validated before being stamped onto the RunEvent payload.");
 /** Append-only event record (one JSONL line). */
 export const RunEvent = z
     .object({

package/dist/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,+DAA+D,CAAC,CAAC;AAG7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,sFAAsF;IACpF,0FAA0F;IAC1F,2FAA2F;IAC3F,qEAAqE,CACxE,CAAC;AAGJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,IAAI,CAAC;IACJ,aAAa;IACb,uBAAuB;IACvB,sBAAsB;IACtB,yBAAyB;IACzB,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,uBAAuB;IACvB,kCAAkC;IAClC,2BAA2B;IAC3B;mFAC+E;IAC/E,8BAA8B;IAC9B;;;;;sFAKkF;IAClF,wBAAwB;IACxB;;8EAE0E;IAC1E,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,8BAA8B;IAC9B,eAAe;IACf,gBAAgB;IAChB,yBAAyB;IACzB;6DACyD;IACzD,iBAAiB;IACjB,eAAe;IACf,uBAAuB;IACvB,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB;4FACwF;IACxF,sBAAsB;IACtB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,YAAY;CACb,CAAC;KACD,QAAQ,CACP,+MAA+M,CAChN,CAAC;AAGJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3F,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACpF,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACjF,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxC,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,oDAAoD,CAAC;CAClE,CAAC;KACD,QAAQ,CACP,0JAA0J,CAC3J,CAAC;AAGJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC9F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACjD,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6EAA6E,CAAC;CAC3F,CAAC;KACD,QAAQ,CACP,mKAAmK,CACpK,CAAC;AAGJ,iDAAiD;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN;;;;OAIG;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3C,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChD,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAChD;6EACyE;IACzE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC5E,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAChG,CAAC;KACD,QAAQ,CAAC,uEAAuE,CAAC,CAAC"}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CAAC,+DAA+D,CAAC,CAAC;AAG7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,EAAE;IACb,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,EAAE;SACV,QAAQ,CAAC,wEAAwE,CAAC;IACrF,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,CAAC,8EAA8E,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE;KACR,QAAQ,CACP,sFAAsF;IACpF,0FAA0F;IAC1F,2FAA2F;IAC3F,qEAAqE,CACxE,CAAC;AAGJ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,IAAI,CAAC;IACJ,aAAa;IACb,uBAAuB;IACvB,sBAAsB;IACtB,yBAAyB;IACzB;;;;;wDAKoD;IACpD,+BAA+B;IAC/B,sBAAsB;IACtB,oBAAoB;IACpB,aAAa;IACb,qBAAqB;IACrB,iBAAiB;IACjB,eAAe;IACf,mBAAmB;IACnB,wBAAwB;IACxB,0BAA0B;IAC1B,0BAA0B;IAC1B,0BAA0B;IAC1B,iCAAiC;IACjC,iCAAiC;IACjC,uBAAuB;IACvB,kCAAkC;IAClC,2BAA2B;IAC3B;mFAC+E;IAC/E,8BAA8B;IAC9B;;;;;sFAKkF;IAClF,wBAAwB;IACxB;;;;;;4CAMwC;IACxC,qBAAqB;IACrB;;8EAE0E;IAC1E,oBAAoB;IACpB,uBAAuB;IACvB,sBAAsB;IACtB,qBAAqB;IACrB,8BAA8B;IAC9B,eAAe;IACf,gBAAgB;IAChB,yBAAyB;IACzB;6DACyD;IACzD,iBAAiB;IACjB,eAAe;IACf,uBAAuB;IACvB,gBAAgB;IAChB,uBAAuB;IACvB;;;;;wDAKoD;IACpD,6BAA6B;IAC7B,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB;;;;gEAI4D;IAC5D,kBAAkB;IAClB,gBAAgB;IAChB;;;;;+DAK2D;IAC3D,gBAAgB;IAChB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,oBAAoB;IACpB,oBAAoB;IACpB,iBAAiB;IACjB,qBAAqB;IACrB,mBAAmB;IACnB,uBAAuB;IACvB,sBAAsB;IACtB;4FACwF;IACxF,sBAAsB;IACtB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,eAAe;IACf,YAAY;IACZ;;kEAE8D;IAC9D,kBAAkB;IAClB;;;mFAG+E;IAC/E,yBAAyB;CAC1B,CAAC;KACD,QAAQ,CACP,+MAA+M,CAChN,CAAC;AAGJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IAC/F,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;IAC3F,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACpF,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IACjF,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;IACxC,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,+CAA+C,CAAC;IAC5D,aAAa,EAAE,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,oDAAoD,CAAC;CAClE,CAAC;KACD,QAAQ,CACP,0JAA0J,CAC3J,CAAC;AAGJ;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IAC9F,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,8EAA8E,CAAC;IAC3F,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,iBAAiB,CAAC;IACjD,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,OAAO,CAAC,IAAI,CAAC;SACb,QAAQ,CAAC,6EAA6E,CAAC;CAC3F,CAAC;KACD,QAAQ,CACP,mKAAmK,CACpK,CAAC;AAGJ;;4EAE4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,IAAI,CAAC;IACJ,WAAW;IACX,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,KAAK;IACL,YAAY;CACb,CAAC;KACD,QAAQ,CAAC,2DAA2D,CAAC,CAAC;AAGzE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,mBAAmB,EAAE,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,kEAAkE,CAAC;IAC/E,mBAAmB,EAAE,CAAC;SACnB,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjB,QAAQ,CAAC,2DAA2D,CAAC;IACxE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACrF,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,CAAC,mEAAmE,CAAC;IAChF,aAAa,EAAE,CAAC;SACb,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC;QACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;QACjE,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6CAA6C,CAAC;KAC3E,CAAC,CACH;SACA,QAAQ,CAAC,0EAA0E,CAAC;CACxF,CAAC;KACD,QAAQ,CACP,iMAAiM,CAClM,CAAC;AAGJ,iDAAiD;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN;;;;OAIG;IACH,GAAG,EAAE,CAAC;SACH,MAAM,EAAE;SACR,GAAG,EAAE;SACL,QAAQ,EAAE;SACV,QAAQ,EAAE;SACV,QAAQ,CACP,qIAAqI,CACtI;IACH,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;IAC3C,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAChD,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,0BAA0B,CAAC;IAChD;6EACyE;IACzE,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;IAC5E,IAAI,EAAE,YAAY;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC;CAChG,CAAC;KACD,QAAQ,CAAC,uEAAuE,CAAC,CAAC"}

package/dist/gate.d.ts

@@ -17,8 +17,8 @@ export declare const GateResult: z.ZodObject<{
     command: string;
     exit_code: number | null;
     id: string;
-    duration_ms: number;
     required: boolean;
+    duration_ms: number;
     stdout_tail: string | null;
     stderr_tail: string | null;
     output_truncated: boolean;
@@ -27,8 +27,8 @@ export declare const GateResult: z.ZodObject<{
     command: string;
     exit_code: number | null;
     id: string;
-    duration_ms?: number | undefined;
     required?: boolean | undefined;
+    duration_ms?: number | undefined;
     stdout_tail?: string | null | undefined;
     stderr_tail?: string | null | undefined;
     output_truncated?: boolean | undefined;